Senior Security Architect

Senior Security Architect**Job Description:**AEGIS Insurance Services, Inc. (“AEGIS”) has an immediate opening for a **Senior Security Architect** responsible for defining, designing, implementing, and maintaining the enterprise security architecture of AEGIS. This role serves as the senior technical authority for cybersecurity and provides leadership across security architecture, engineering, operations, infrastructure security, cloud security, identity and access management, application security, data protection, and security technology modernization.The Senior Security Architect partners closely with the Chief Information Security Officer, Vice President, IT Infrastructure, infrastructure team, application teams, business stakeholders, risk management, legal, and external vendors to ensure technology solutions align with regulatory requirements and cybersecurity best practices.**Job Requirements:*** Minimum 10 years of progressive experience in cybersecurity, security engineering, infrastructure security, network security, cloud security, or related technical disciplines* Undergraduate degree in Information Systems, Management Systems, Cybersecurity or related discipline or equivalent certification or work experience* CISSP, GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Cloud Threat Detection (GCTD) certifications desired* Demonstrated experience designing and implementing enterprise security architectures* Extensive hands-on experience administering and supporting security technologies* Demonstrated experience in security operations, incident response, vulnerability management, and security architecture* Experience with Microsoft 365 security, cloud security, identity and access management, endpoint security, and data protection technologies* Experience evaluating and selecting cybersecurity technologies and vendors* Insurance industry experience desired**AEGIS Core Competencies:*** Collaborative Communications and Behavior: 0Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplace.* Initiative and Accountability: Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholders.* Quality-Focused: Demonstrates a solution-focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomes.* Service-Oriented: Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers**Essential Job Functions:***Planning and Strategy – Security Architecture** Define and maintain enterprise security architecture, standards, policies, design patterns, and technical control requirements* Develop security roadmaps aligned with business objectives, regulatory requirements, and risk management priorities* Lead security architecture reviews for infrastructure, cloud, application, network, endpoint, and third-party technology initiatives* Identify security gaps and recommend strategic remediation plans* Define secure reference architectures and implementation standards*Quality Assurance and Continuous Improvement – Security Engineering & Operations** Design, implement, configure, administer, and maintain security technologies and controls* Perform advanced troubleshooting of security, network, cloud, server, endpoint, and identity-related technologies* Lead implementation activities for new security technologies, upgrades, migrations, and modernization projects* Maintain responsibility for day-to-day operation of key cybersecurity platforms* Participate directly in incident response, investigation, containment, eradication, recovery, and lessons learned activities* Conduct technical security assessments, architecture reviews, and risk analyses* Develop and maintain security technical documentation, standards, procedures, implementation guides, and architectural diagrams* Support vulnerability management and IT’s remediation efforts* Perform security monitoring, threat analysis and control validation activities* Develop and govern enterprise security hardening requirements for operating systems, network devices, servers, cloud services, and supporting infrastructure; collaborate with IT and Infrastructure teams to implement secure configurations, remediate security gaps, and continuously improve cybersecurity resilience across the technology environment* Participate in maintenance windows, emergency response activities, and after-hours support as required* Maintain deep technical expertise across a broad range of security disciplines within a lean security organization*Project/Program Management and Support – Microsoft 365, Cloud & Data Security** Provide architecture and operational support for Microsoft 365 security capabilities including Entra ID, Intune, Defender, Purview, SharePoint Online, OneDrive, Exchange Online, Teams, and Microsoft Copilot* Develop security controls protecting sensitive information, collaboration platforms, and AI-enabled technologies* Evaluate security risks associated with cloud adoption, data sharing, AI technologies, and third-party integrations* Support Zero Trust initiatives across identity, device, application, and data layers*System Maintenance and Optimization – Infrastructure & Network Security** Provide architectural and engineering leadership for network security, firewalls, secure web gateways, remote access, endpoint protection, server security, segmentation, and monitoring solutions* Review infrastructure designs for security* Lead security reviews of system upgrades, migrations, and infrastructure modernization initiatives*Resource, Expense, and Vendor Management** Evaluate cybersecurity products, managed services, and third-party technologies* Perform technical due diligence and security assessments during procurement activities* Develop security requirements for vendor selection and solution design* Lead proof-of-concept activities and security architectural reviews for new technologies*Collaboration and Team Support** Serve as the senior technical escalation point for cybersecurity matters* Mentor security, infrastructure, and application teams on secure design and operational best practices* Communicate technical risks and recommendations to technical and non-technical audiences* Influence technology decisions across the enterprise through expertise and leadership* Maintain awareness of emerging threats, technologies, regulations, and industry best practices Insurance Services, Inc. participates in E-VerifyWe expect to pay a starting salary between $175,000 and $265,000. An applicant’s placement within this range is based on their individual qualifications and professional experience. In addition to base salary, AEGIS employees are eligible to participate in the Company’s annual incentive program, with competitive awards based on corporate and individual performance.In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:* Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs* Retirement: 401(k) with matching contribution* Income Protection: Life, disability, accident and critical illness insurance* Time Off: Vacation days, sick days, holidays and family/military leave options* Other: Commuter benefits, pet insurance, hybrid work schedule* Growth: Tuition assistance and professional development opportunitiesWe will consider this application carefully, but it does not guarantee employment. Selection is on a competitive basis. In addition, you must meet employment standards and specific position requirements. Qualified applicants will receive consideration for employment without regard to race, creed, color, sex, sexual orientation, age, marital status, disability, national origin, veteran status or any other legally protected status. #J-18808-Ljbffr